Laboratorul13:Utilitarededepanareareelelor

Utilitarededepanarearee lelor

ncadrulacestuilaboratorvorfiprezentateomicpartedinaanumitele"tooluridedepanareareelelor".
Pentruacestlaboratoracesteavorfi:ping,traceroute,netstatiroute.
Ateni e:parteaderoutaresecerelaexamen!

1.Ping
Esteunprogramcetrimitepachete"ICMP Echo Request"spreunanumithostiaracesta,nprincipiu,
varaspundecupachete"ICMP Echo Reply".Dacnuaparpierderidepachetenreea(saudinalte
motiveposibile)vomaveapentrufiecare pachet trimisunulprimit.Dupfiecare pachettrimisprogramul
asteaptosecundnaintestrimitaltul.nintervaluldeateptaredintredouapacheteseateptdup
pachetultrimisdehostullacaresunttrimisepachetele.ncazulncaretimpuldedintredoupachetetrimise
este0sespunecaavem"pingflood".Doarsuperuserulpoatessetezetimpuldeateptarentredoua
pachetesaupoatefoloseascoptiuneadeflood.ngeneral(99.9999999999%dincazuri)nuavemnevoie
sfolosimacesteoptiuni.
Not:
Folosireaabuzivaopiuniidefloodpoatefacemariprobleme(inprimul

randvou!).

Exemplu:
# ping imhotep.aut.utt.ro
PING imhotep.aut.utt.ro (10.6.14.200) 56(84) bytes of data.
64 bytes from imhotep.aut.utt.ro (10.6.14.200): icmp_seq=1 ttl=64 time=0.140 ms
64 bytes from imhotep.aut.utt.ro (10.6.14.200): icmp_seq=2 ttl=64 time=0.055 ms
64 bytes from imhotep.aut.utt.ro (10.6.14.200): icmp_seq=3 ttl=64 time=0.060 ms
--- imhotep.aut.utt.ro ping statistics --3 packets transmitted, 3 received, 0% packet loss, time 1998ms
rtt min/avg/max/mdev = 0.055/0.085/0.140/0.038 ms

Exempluldemaisusconstntrimitereadepachetedecte64debytessprehostulimhotep.aut.utt.ro,host
carevarspundecucteunaltpachetde64bytespentrufiecarepachetprimit.ncazuldefa,dupaal
treileapachet saapsatCTRLC,iartrimitereadepachete este oprit.nncheiere programulafieaz
statisticilepetruhostulncauz.
nmodnormalnusepoatefacepingpeoadresadebroadcast.
Tema1:
a)careestemotivulpentrucareunutilizatornuartrebuisfoloseascopiuneab(pingpeadresade
broadcast).

b)UndepoatefiopritunpachetICMPEchoRequestcarevinedintroaltreeacudestinaiaadresade
broadcastareeleivoaste.
Pingraporteazpacheteduplicatei/saupachetestricate.nprincipiunuartrebuisavempacheteduplicate.
1/5

Laboratorul13:Utilitarededepanareareelelor

Dacapar,nunseamnantotdeaunacavemunmotivdengrijorare.Dacaparpachetestricatenseamna
c,undeva,petraseuldintreceledouhosturi,exist(nmajoritateacazurilor)unechipamenthardware
stricat.
TTLuldinexempludemaisusreprezintnumarulmaximdehosturiprincarepachetulpoatestreac.n
cazcacestnumarestedepit,pachetulestedistrus(DROP).ngeneral,fiecarerouterdecrementeaz
TTLulcuounitate.SpecificaiileTCP/IPspuncvaloareaTTLuluisfiesetatla60darexistisistemede
operarecarelucreazcuvaloride30sau15.ValoareamaximaTTLuluieste255iarmajoritateasistemelor
Unix seteaz valoarea TTLului din pachetul Echo Request la 255. Acesta este motivul pentru care,
cteodat,putemfacepingpeunhostdarnulputemaccesacutelnetsauftp.nmomentulcndprimete
unpachetICMPEchoRequestunhostaretreiposibilitinprivinacmpuluiTTLdinpachetul:
sllaseneschimbat(pachetulprimitvafi255numrulderouterepnalahostinapoi).
slsetezela255(pachetulprimitvafi255numrulderouteredelahostullacareafosttrimis
pachetul).
slsetezelaovaloareanume(60,30sauoricarealta).
Pentrualteinformaiinlegturcuprogramulpingserecomandcitireamanualuluicomenzii(man ping).
2.Traceroute
Programultracerouteafieaz"calea"pecareunpachetoparcurgepnlaunanumithostprintrimitereade
pacheteUDPcuunTTLmic.ProgramulapoiascultdupdupaunpachetICMPTimeExceededdelaun
router/gateway.SepornetedelaTTL1carevafiincrementat,pnalaprimireaunuipachetICMPPort
UnreachablesauseajungelaTTL30.PentrufiecareTTLsetransmit3pacheteiarprogramulvaafiaTTLul,
adresasaunumelegatewayuluiitimpuldusntorspentrufiecarepachet.Dacnuseprimeteunrspuns
timpde5secunde,sevaafiacaracterul"*"pentruacelpachet.Portulhostuluidestinaievafiunulcaren
generalnuestefolositpentruanufiprocesatdectrerespectivulhost.
Dacunpachetsentoarce cuTTLul1nseamnc,probabil, existoproblem.Traceroutevaafia
caracterul!duptimpulparcursdepachetdacTTLulacestuiaeste<=1.
Alteexempledemesajedeeroarepotfi:
!H

hostunreachable
!N

networkunreachable
!P

protocolunreachable
!S

sourceroutefailed
!X

communicationadministrativelyprohibited
!V

hostprecedenceviolation
!C

precedencecutoffineffect
!<num>
ICMPunreachablecode<num>
AcesteacodurideeroaresuntdefinitenRFC1812(caresuperclaseazRFC1716).
Dacaproapetoatepachetelesentorccuuncoddeeroare,traceroutevaieidinexecuie.

2/5

Laboratorul13:Utilitarededepanareareelelor

Exemplu:
# traceroute www.yahoo.com
traceroute: Warning: www.yahoo.com has multiple addresses; using 216.109.118.68
traceroute to www.yahoo.akadns.net (216.109.118.68), 30 hops max, 38 byte packets
1 router (193.226.9.129) 0.299 ms 0.214 ms 0.175 ms
2 r-bb1-f5-1-0-210.timisoara.roedu.net (193.226.8.111) 1.280 ms 1.048 ms 0.989 ms
3 r-gsr12406-s1-1-34M.nextgen.roedu.net (217.73.160.81) 12.932 ms 12.664 ms 8.986 ms
4 roedunet.hu1.hu.geant.net (62.40.103.77) 20.584 ms 20.537 ms 20.772 ms
5 hu.at1.at.geant.net (62.40.96.177) 25.713 ms 30.021 ms 25.681 ms
6 at.ch1.ch.geant.net (62.40.96.2) 43.991 ms 45.536 ms 44.072 ms
7 so-6-0-0.ar2.CDG2.gblx.net (208.48.23.161) 51.765 ms 53.813 ms 54.233 ms
8 pos5-0-2488M.cr1.CDG2.gblx.net (67.17.65.113) 51.909 ms 51.534 ms 53.320 ms
9 so0-0-0-2488M.cr2.LON3.gblx.net (67.17.64.38) 59.113 ms 59.034 ms 59.738 ms
10 so7-0-0-2488M.ar2.LON3.gblx.net (67.17.66.30) 59.452 ms 62.938 ms 60.101 ms
11 Level-3public-peering.ge-5-0-0.ar2.LON3.gblx.net (208.51.239.162) 60.108 ms 59.855 ms 60.998
ms
12 ae-0-55.mp1.London1.Level3.net (212.187.131.161) 60.826 ms 61.328 ms 61.531 ms
13 so-1-0-0.mp1.London2.Level3.net (212.187.128.49) 61.236 ms 64.514 ms 62.401 ms
14 so-1-0-0.bbr1.Washington1.Level3.net (212.187.128.138) 134.216 ms 132.616 ms 133.801 ms
15 ge-7-2.ipcolo1.Washington1.Level3.net (64.159.18.131) 132.591 ms 132.977 ms 134.235 ms
16 unknown.Level3.net (63.210.59.254) 134.206 ms 135.699 ms 133.628 ms
17 vl30.bas1-m.dcn.yahoo.com (216.109.120.142) 135.015 ms 135.131 ms 134.540 ms
18 p5.www.dcn.yahoo.com (216.109.118.68) 135.467 ms 133.993 ms 135.635 ms

Pentrualteinformaiinlegaturcuprogramultracerouteserecomandcitireamanualuluicomenzii(man
traceroute).

3.Netstat
Programulnetstatafieazconexiunile,tabeladeroutare,statisticilepentruinterfeelederetea,conexiunile
masqueradeatealehostuluipecareesterulat.
ncontinuaresevorprezentataunelecmpuridintabelaafiatdenetstat:
Proto
Recv-Q
Send-Q
Local Address
Foreign
Address
State

Protocolul(TCP,UDPsauraw)folositdesocket
Numruldebytesnecopiaideprogramulcefoloseteacestsocket
NumruldebytespentrucarenusaprimitACKdelanodulremote
Adresaiportullocalfolositdesocket(nodullocal)
Adresaiportuldestinaiefolositdesocket(nodulremote)
Stareasoketului:
ESTABLISHED
SYN_SENT

SYN_RECV

FIN_WAIT1

FIN_WAIT2

conexiunestabilit(stareanormaldetransferadatelor)
conexiuneaestencursdedeschidere
ocereredeconexiuneafostprimit.SeateaptACK
sochetulafostnchis,conexiuneaurmeazsfienchis
conexiunea este nchis, socketul asteapt nchiderea
noduluidestinaie(remoteend)
TIME_WAIT socketulestenchisiateaptduppachetelecaremai
suntnreea
CLOSED
socketulnuesteutilizat(nicioconexiunenuesteactiv
saunateptare)
CLOSE_WAIT nodulremoteestenchis,seateapt nchidereasocket
ului
3/5

Laboratorul13:Utilitarededepanareareelelor

nodulremoteestenchis,socketulestenchis,seatept
ultimulACK
LISTEN
anuncapacitateadeaacceptanoiconexiuni.Socketurile
deacesttipnusuntafiatedectprinspecificareaexplicit
larulareaprogramuluiaparametrilorlistening(l)sauall
(a)
CLOSING
ambele socketuri sunt nchise, dar mai exist date
netransmise
UNKNOWN
staresocketuluiestenecunoscut
Utilizatorulcareruleazprogramulceadeschissocketul
Perecheaidproces/numeprocescareadeschissochetul.Trebuiedrepturide
superuserpentruavedeaceprocesedeschidunanumitsochetaltuldectcele
deschidedeuserulceruleaznetstat.
LAST_ACK

User
PID/Program
Name

Pentru alte cmpuri afiate, precum i parametrii ale comenzii netstat se va consulta manualul (man
netstat).
4.Route
Programulroutepoateadauga/terge/modificaroutentabeladeroutarestaticspreun/oanumit/anumit
host/reeaviaointerfadereeaceafostnprealabilconfigurat.
Adiional n anumite sistemele de operare sepoate face iafiarea tabelei de routare (pe cele n care
comandanuafieaztabeladeroutare,aceastadinurmseobinefolosindcomandanetstat(netstat
-r).
Exemple:
route add -net 127.0.0.0
adaug o rout spre adresa de loopback, folosind netmaskul 255.0.0.0 (reea de clas A,
determinat din adresa destinaie) i asociat cu interfaa "lo" (se presupune c interfaa a fost
configuratcorectfolosindcomandaifconfig).
route add -net 192.168.32.0 netmask 255.255.255.0 dev eth0

adaugoroutcatrereeaua192.168.32.0viainterfaa"eth0".Netmaskul255.255.255.0nueste
necesarncazuldefadeoarece192.*.*.*estedeclasaC.Parametrul"dev"aicipoatefiomis.
route add default gw helios
adaugoroutdefault(carevafiutilizatadacnicioaltroutnupoatefifolosit).ncazuldefa,
toate pacheteleutiliznd aceastroutvorfitrimisespregatewayulhelios.Interfaacarevafi
utilizatpentruaceastroutdepindedecumputemajundelahostulhelios(routastaticctre
heliostrebuiesetatnainte).
route add -net 10.0.0.0 netmask 255.0.0.0 reject
adaugoroutderejectareaoricrorpachetecatrereeauaprivat10.0.0.0

4/5

Laboratorul13:Utilitarededepanareareelelor

Afiareatabeleideroutareconineurmtoarelecoloane:
Destination
Gateway
Genmask
Flags

Metric
Ref
Use
Iface

destinaia(reea/host)
adresagatewayuluisau*dacanuexistniciunulsetat
netmaskulpentrureeauadestinaie,255.255.255.255dacdestinaiaeste
unhostsau0.0.0.0pentruroutadefault
posibileflaguripentrurutarespectiv.
Uroutaeste"up"
Hdestinaiaesteunhost
Gsefoloesteungateway
Rroutreinstatepentruroutareadinamic
Droutdinamicsauredirect
Mroutmodificat(ptr.routaredinamicsauredirect)
Aroutinstalatdeaddrconf
Ccache
!routreject
distana pn la destinaie (numrul de hopuri). Kernelurile noi nu mai
folosescaceastvaloaredareaestenecesarpentruroutareadinamic.
numaruldereferinepentruaceastrout.Nuestefolositsublinux.
numaruldelookupspentruaceatarout
interfaaprincaresevortrimitepachetele

Exemplu:
# route -n
Kernel IP routing table
Destination
Gateway
192.168.100.1
0.0.0.0
192.168.100.3
0.0.0.0
192.168.200.2
0.0.0.0
193.226.9.128
0.0.0.0
192.168.32.0
0.0.0.0
10.0.0.0
0.0.0.0
127.0.0.0
0.0.0.0
0.0.0.0
193.226.9.129

Genmask
255.255.255.255
255.255.255.255
255.255.255.255
255.255.255.128
255.255.255.0
255.0.0.0
255.0.0.0
0.0.0.0

Flags
UH
UH
UH
U
U
U
U
UG

Metric
0
0
0
0
0
0
0
0

Ref
0
0
0
0
0
0
0
0

Use
0
0
0
0
0
0
0
0

Iface
cipcb0
cipcb1
cipcb2
eth0
vmnet8
eth1
lo
eth0

Pentru alte informaii n legatur cu programul route se recomand citirea manualului comenzii (man
route).

5/5